[jtravs]

Brings croak's contributor workflow up to solprop's standard, keeping only what fits a small single-package repository. Overlaps #11: both change the actions in the workflows, and this pins newer versions by commit, so #11 should become unnecessary.

What changed

• Changelog between PRs. A notable change adds a changelog.d/ fragment instead of editing CHANGELOG.md. After each merge, the new Release notes workflow refreshes one draft PR that collects the fragments. The tools come from solprop, adapted to croak's ## [Unreleased] heading.
• Issues and PRs. New CONTRIBUTING.md and issue forms (report_a_problem.yml, planned_work.md), plus labels for type, priority and area.
• AGENTS.md. New rules: agree the plan for large changes, re-derive rather than transcribe, open an issue for what you find, connect a fix to its issue, keep the public tree free of local paths and private notes, and cite transcribed constants to a primary source. Agents now merge, push, tag or release only when asked, replacing "never push". The ban on destructive git commands stays.
• Gate. poe check also runs codespell (a new dev dependency) and poe changelog-check.
• Release records. New docs/developer_guide/releasing.md: ci.yml and release.yml pointed at a release checklist that didn't exist. New tests/test_release_metadata.py checks that the version agrees across pyproject.toml, croak/__init__.py, uv.lock, CITATION.cff and the changelog.
• Workflows. Actions pinned by commit at solprop's versions, and ci.yml gets a read-only token.

Decisions for review

1. Relicensing. tools/release_notes.py, tools/update_release_notes.py and their tests are GPL-3.0-or-later in solprop and arrive here as MIT with the SPDX headers dropped. git log shows @jtravs as the only author of those files. Please confirm that's acceptable.
2. .zenodo.json has no version any more. It still said 0.1.0. solprop's file has no such field either. I expect Zenodo to take the version from the release tag, but I haven't checked that against a Zenodo release.
3. Local gate stays. solprop tells contributors not to run the full gate locally. croak keeps running it first, because it took about 3 minutes here against 25–36 minutes per platform on CI.

Not ported

SEPs and ADRs, numpydoc lint (about 2000 lines of findings, so a job of its own), REUSE headers, test tiers, the lowest-dependency lane, path-filtered CI lanes, pre-commit and .gitattributes. Author names also differ between pyproject.toml ("John Travers") and CITATION.cff ("John C. Travers"); this PR leaves that alone.

Already changed on GitHub

These took effect outside this PR:

• Created 12 labels: priority: high, priority: medium, priority: low, performance, refactor, testing, and area: forward model, area: solvers, area: uncertainty, area: preprocessing, area: gui, area: packaging.
• Labelled parameter_covariance ignores weights when a noise model is given #3, marginal_peak_delay_jax returns the neighbouring sample for an edge peak #4 and without a spectral target, noisy traces are fitted with noise in signal-free grid-edge bins; warm-lbfgs is biased even with one #5. The priorities are my judgement.
• Turned on Allow GitHub Actions to create and approve pull requests, which the release-notes workflow needs to open its draft. Default token permissions stay read-only.

Verification

• uv run poe check on macOS: passed, 1764 passed and 3 skipped, 100% statement and branch coverage.
• uv run --group docs poe docs: built with -W.
• uv run poe changelog-preview: this PR's fragment appears under ## [Unreleased], and no existing line of the changelog changes.
• All new YAML parses. The updater's tests run against local Git repositories, so it has not yet run against GitHub.
• This PR's CI is the first test of setup-uv 10.3.2 and codecov-action 7.1.1 on croak, a larger jump for setup-uv than build(deps): bump the actions group with 3 updates #11 tested.

Only checkable after merging:

• The first Release notes run succeeds and opens the draft PR.
• The forms appear at /issues/new/choose.

🤖 Generated with Claude Code

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-04T10:56:10.309314Z	de6e665	PR opened
🔒 Security Review	✅ Completed 2026-11-04T10:58:31.723672Z	de6e665	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[read-the-docs-community]

Documentation build overview

📚 croak | 🛠️ Build #35639320 | 📁 Comparing de6e665 against latest (7b75ca2)

  🔍 Preview build  

5 files changed · + 1 added · ± 4 modified

+ Added

• developer_guide/releasing.html

± Modified

• developer_guide/documentation.html
• developer_guide/environment.html
• developer_guide/index.html
• reference/naming.html

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!